Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    962bff25d60405278a0ce4cdd23c8140_JaffaCakes118

  • Size

    45KB

  • Sample

    240814-p3laksxgjr

  • MD5

    962bff25d60405278a0ce4cdd23c8140

  • SHA1

    63bbe647ece996f3e9f66ab7663c0aee05265212

  • SHA256

    abc47fd11167673359346ca62458a19e1ffd140890009518d92d24d2f5ce39c2

  • SHA512

    861da4d21903414a32eba14da5ff9cd8c660f0c6cf13f881b3ac15275fa0415637d84624653e2b675b867041ed08ab90ae71df4fc2ac20cc008b2ea33f17a517

  • SSDEEP

    768:r3H3C3d3i3ascHqg7zO/nAijkFHW8nB6ER1gkfLlnsFOmF6lGKis8zxZHEtd:r3H3C3d3i337tALNBx5fbmdK18z

Malware Config

Targets

    • Target

      962bff25d60405278a0ce4cdd23c8140_JaffaCakes118

    • Size

      45KB

    • MD5

      962bff25d60405278a0ce4cdd23c8140

    • SHA1

      63bbe647ece996f3e9f66ab7663c0aee05265212

    • SHA256

      abc47fd11167673359346ca62458a19e1ffd140890009518d92d24d2f5ce39c2

    • SHA512

      861da4d21903414a32eba14da5ff9cd8c660f0c6cf13f881b3ac15275fa0415637d84624653e2b675b867041ed08ab90ae71df4fc2ac20cc008b2ea33f17a517

    • SSDEEP

      768:r3H3C3d3i3ascHqg7zO/nAijkFHW8nB6ER1gkfLlnsFOmF6lGKis8zxZHEtd:r3H3C3d3i337tALNBx5fbmdK18z

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks